Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/771099F6898911F1A38139A3CE1D38B0.roa
File: 771099F6898911F1A38139A3CE1D38B0.roa (raw, json)
Hash identifier: lfz2A6BUnwvsfgv816trDleF+Sk2OImkHKLifUnV+rk=
Subject key identifier: 3F:1B:09:35:9F:64:C0:5C:83:8B:05:FB:06:CE:A0:46:B3:85:6D:43
Certificate issuer: /CN=F36952BDAF/serialNumber=F3E24E5A9B76FE4D25D3175C3A5F7C29C6FB0488
Certificate serial: 04F1
Authority key identifier: F3:E2:4E:5A:9B:76:FE:4D:25:D3:17:5C:3A:5F:7C:29:C6:FB:04:88
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/771099F6898911F1A38139A3CE1D38B0.roa
Signing time: Mon 27 Jul 2026 07:04:53 +0000
ROA not before: Mon 27 Jul 2026 07:04:49 +0000
ROA not after: Sat 31 Dec 2033 07:04:49 +0000
asID: 329211
IP address blocks: 102.212.236.0/22 maxlen: 24
2c0f:3980::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.mft
rsync://rpki.afrinic.net/repository/afrinic/8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 03:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1265 (0x4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36952BDAF, serialNumber=F3E24E5A9B76FE4D25D3175C3A5F7C29C6FB0488
Validity
Not Before: Jul 27 07:04:49 2026 GMT
Not After : Dec 31 07:04:49 2033 GMT
Subject: CN=6a670315-79a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b6:6d:79:70:07:83:56:2e:b8:55:8d:37:7c:
78:b1:ca:8d:69:19:45:29:e6:25:e7:d8:3c:74:39:
fc:be:95:8a:b8:ad:86:e4:76:e8:ab:ec:8d:0d:b9:
61:7f:d1:8a:64:6d:d5:81:c4:fd:4b:cf:72:fc:a2:
38:b1:f6:3b:2e:67:f8:61:c3:f4:42:28:95:3f:a1:
ea:fa:8f:0e:21:5c:91:41:48:41:83:51:b1:82:16:
81:af:5e:e7:14:88:91:03:2b:12:23:c6:2b:fb:93:
fe:41:9f:5b:26:60:88:12:3c:83:19:b7:44:7d:a1:
b9:43:4f:33:44:7f:67:4d:82:ed:e4:95:7c:c7:33:
2e:fe:4b:8a:7a:5e:bb:d2:60:d1:fe:fb:8e:65:26:
f1:31:d3:4f:bc:a9:e5:d2:ec:1f:0c:76:48:b4:59:
07:4d:0c:49:a5:6b:6a:02:9c:db:28:a8:11:25:c8:
eb:71:a1:93:92:30:ba:f6:15:93:f6:47:97:94:fa:
8f:a9:57:f1:f4:fc:22:fd:59:2a:71:5b:ec:2c:ef:
8e:dd:9e:ce:27:22:2a:8e:12:6c:5c:3f:c2:ba:78:
e0:56:d6:7b:cd:43:df:2c:23:6c:48:57:c9:b2:e8:
ee:53:e9:75:22:94:64:15:77:52:1c:2d:1d:29:15:
bf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1B:09:35:9F:64:C0:5C:83:8B:05:FB:06:CE:A0:46:B3:85:6D:43
X509v3 Authority Key Identifier:
keyid:F3:E2:4E:5A:9B:76:FE:4D:25:D3:17:5C:3A:5F:7C:29:C6:FB:04:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/771099F6898911F1A38139A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.212.236.0/22
IPv6:
2c0f:3980::/32
Signature Algorithm: sha256WithRSAEncryption
97:aa:90:fb:d8:f6:ce:0a:cf:c4:0a:92:65:b5:f7:74:d1:04:
af:e2:97:b5:d3:c0:c8:bc:10:aa:b0:1b:9c:3a:41:ae:fd:3b:
0e:bf:c2:df:c0:bf:7f:14:03:8e:26:60:8c:4c:43:24:ac:0a:
4f:f9:1a:d7:0b:0f:f8:74:5d:5b:3c:90:f5:fa:fa:31:de:75:
7e:48:25:af:f2:7a:a7:38:bb:93:20:07:b6:c8:a3:37:09:42:
98:7f:09:10:bf:14:f9:63:af:ac:a9:02:3f:f4:dc:89:bd:e8:
18:3f:89:09:b2:1c:f9:03:5e:5d:b4:f9:29:a6:dd:e1:e3:8b:
b8:73:81:06:9c:e6:18:da:de:cf:4c:25:c9:50:7a:32:32:cb:
dc:32:f0:8c:b3:73:12:64:b1:3c:0f:1d:27:01:40:9d:5e:e5:
16:48:3f:9c:05:4c:6c:f0:0d:dc:cc:cd:d8:09:76:d8:19:38:
9c:19:ad:6b:68:69:04:ba:e7:22:ba:9c:08:94:9f:6d:8a:17:
eb:4b:23:bd:46:40:bd:8e:b2:6a:28:88:3b:88:34:60:a7:00:
8c:e9:44:d0:66:00:8a:91:e8:4a:65:dc:c3:1a:ab:4a:35:89:
b5:15:85:e3:a8:7c:da:85:3f:8e:6b:02:c2:e7:b2:ff:0b:07:
ea:2d:d2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:06:41 2026 by rpki-client